Apple said that from version 27.3 of iOS, iPadOS, macOS and visionOS, iCloud Photos or Drive items shared with “Anyone with the Link” are made accessible to Apple for a harmful-content check. Public links are no longer end-to-end encrypted even with Advanced Data Protection on. Apple may remove content or take account action, including involving law enforcement if needed. Sharing with specific people is outside this check.

What it means: For Greek SMEs, studios, agencies and teams that casually share drafts via public iCloud links, the trust model changes: a public share is no longer an end-to-end private channel. Sensitive work files should prefer people-you-choose links, encrypted packages or corporate file sharing with access control and audit logs. The policy also flags account risk: false positives or terms breaches can affect an Apple ID used for business email, certificates or devices. Update internal rules on when public links are allowed and which data must never go there. Security teams can fold the change into awareness training with approved alternatives. This is not a private-vault scan; it targets publicly reachable shares. For GDPR compliance, still tell users that the provider may inspect content when a public link is chosen. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short notice that points to the primary source and avoids overstated claims. Compliance, cybersecurity and payments operations are linked; a change in one area often requires a pass over contracts, access rights and continuity plans. Finally, keep a review date so the item becomes concrete actions for the Greek business rather than newsletter noise alone.

Read the original on Apple Support

Related service: Custom software

Related stories